Bloodhound python Ingestor using ADWS
@r1cksec.bsky.social
@r1cksec.bsky.socialBloodhound python Ingestor using ADWS
@pxology.bsky.socialARTEX’in geliştiricisi, aracın Güney Kore bankalarına yönelik saldırılarda kullanıldığının bildirilmesinin ardından projeyi kapalı kaynağa çevirdi; genel sürüm ve bakım desteği duracak.
@r1cksec.bsky.socialA PoC DLL-injection that manipulates internally constructed thread-pool callback-instance storage to invoke LoadLibraryA directly from a worker thread without custom callback code or shellcode.
@r1cksec.bsky.socialA collection of tips & tricks on how to escape a kiosk mode environment
@lcheylus.bsky.socialRetour d'expérience d'un audit de sécurité de la solution Retyc (stockage Cloud et transfert sécurisé de fichiers) avec Cyber Verification Portal d'Anthropic - Article de synthèse par Emilien Mantel @hanx.triplestack.fr #Infosec #IA #Pentest retyc.com/fr/blog/ai-p...
Le fuzzing web est la première étape d'un pentest réussi, mais encore faut-il avoir les bonnes word lists. Les limites des listes publiques coûtent parfois cher en mission.
#Cybersécurité #Pentest #WebSecurity #RedTeam
🎧 Web: bit.ly/3TlTzfD
🎧 Spotify: bit.ly/4j3I5I0
🎧 YouTube: bit.ly/4hvmS8M
@r1cksec.bsky.socialA listener profile for the Mythic C2 framework that utilizes AI vendors file API's
@blackburnworld.bsky.socialPenetration testing helps organisations find and fix vulnerabilities. Ensure clear scope, careful handling of findings, and actionable remediation.
Read more: www.blackburnworld.com/ethical-hack...
@k3rberos1.bsky.social
@niztal.bsky.social💀 Someone Clicked the Link. Is Your Security Team Ready?
Someone Clicked the Link. Is Your Security Team Ready? Exploring this year’s Cybersecurity Awareness Month theme and what it …
#EthicalHacking #PenTest #BugBounty
OffSec · https://www.offsec.com/blog/cybersecurity-awareness-month-2026/
@r1cksec.bsky.socialCross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
@r1cksec.bsky.socialEnumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal.
#infosec #cybersecurity #redteam #pentest #osint #opensource
@infotransec.bsky.socialPassing a compliance audit ≠ being secure.
Pen testing simulates actual attacker behaviour — not checkbox exercises. InfoTransec maps findings to real business risk.
Pourquoi un proxy offensif exige sa propre stack HTTP, réécrite en Rust ? Émile et Christopher, cofondateurs de Caido, lèvent le voile.
🎧 Web: bit.ly/3SXMx0i
🎧 Spotify: bit.ly/46jy9CA
🎧 YouTube: bit.ly/4yzy4qt
@toxy4ny.bsky.social@r1cksec.bsky.socialInjectSetConsole performs process code injection by leveraging a Windows named pipe.
@r1cksec.bsky.socialA single-pass Active Directory enumerator for an anonymous (null) session, using the \samr and \lsarpc named pipes. No credentials required.
@offseq.bsky.socialOffSeq is an European offensive security company. Pentesting, red teaming, OT/ICS security and NIS2/DORA work across the EU.
Here we post vulnerability research, honeypot field reports and open-source tools. Open to collaboration.
@h4ckers-arise.bsky.socialIf you want to test routers, look for Wifit3!
It simulates all the common attacks that hackers might use against your access point hackers-arise.com/wi-fi-hackin...
#pentest #cybersecurity #wifi #routers
@r1cksec.bsky.socialDrop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.